Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ufpa97gygze25Oj5jq8L8yjkPtU.roa
File:                     ufpa97gygze25Oj5jq8L8yjkPtU.roa (raw, json)
Hash identifier:          h4c3gmVz4Wjd2hlJCsfR46gr5nTjaBdlfusZMUO3hFE=
Subject key identifier:   B9:FA:5A:F7:B8:32:83:37:B6:E4:E8:F9:8E:AF:0B:F3:28:E4:3E:D5
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019261B4E849ECB0738F6273B8DDAD1E2CAD
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ufpa97gygze25Oj5jq8L8yjkPtU.roa
Signing time:             Sun 06 Oct 2024 12:01:38 +0000
ROA not before:           Sun 06 Oct 2024 12:01:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     20454
IP address blocks:        83.136.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 13 Oct 2024 09:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:61:b4:e8:49:ec:b0:73:8f:62:73:b8:dd:ad:1e:2c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Oct  6 12:01:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b9fa5af7b8328337b6e4e8f98eaf0bf328e43ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:bd:e0:f5:90:7f:91:8e:22:e1:72:7e:42:
                    7e:25:d8:14:0e:fd:55:ce:55:2a:c0:b3:7b:a7:27:
                    bb:aa:5d:b5:9d:57:1f:88:51:e5:11:d6:e7:32:a1:
                    b1:8a:bc:10:c1:81:4e:c3:b8:e0:11:87:01:9b:45:
                    ad:ee:96:5c:98:1a:e1:2c:94:c2:d1:f2:8b:71:45:
                    6e:75:da:13:d6:a6:82:d2:5a:c7:13:79:44:6f:d6:
                    67:01:4c:b9:c4:a7:81:3a:25:32:be:e9:68:c6:51:
                    b1:6c:69:47:ee:68:a7:9c:99:89:28:83:1c:1b:8a:
                    53:2b:49:b3:55:bd:bb:40:de:29:30:b3:2b:a1:fc:
                    44:46:39:cc:fa:5c:71:ca:f8:6e:9d:3f:81:36:e8:
                    98:00:15:8a:5e:90:31:7a:bb:79:e4:ee:41:cf:26:
                    fe:5f:36:a3:1d:ce:e1:89:83:ca:a2:b2:28:1a:01:
                    f0:eb:10:b7:a2:e5:23:30:a4:99:65:10:5e:b1:49:
                    12:40:65:d0:5d:3a:95:ed:0b:17:20:28:4d:89:60:
                    fd:ac:5c:02:c6:86:46:62:25:97:3e:d9:de:41:ea:
                    cb:78:c8:00:c7:2e:17:5a:88:4a:96:45:2e:22:c0:
                    c3:98:66:4a:3d:a4:e2:f9:d7:a2:03:76:5a:4a:d7:
                    49:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FA:5A:F7:B8:32:83:37:B6:E4:E8:F9:8E:AF:0B:F3:28:E4:3E:D5
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ufpa97gygze25Oj5jq8L8yjkPtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:30:af:47:c8:b4:85:b1:fa:4d:b9:c2:e9:e6:9c:fe:85:8a:
         97:a1:eb:23:db:72:27:d4:fa:aa:ac:7d:76:8d:0a:e0:1f:05:
         39:26:de:d1:1b:3c:eb:2a:9c:27:ce:8a:15:4b:4a:b9:ed:f1:
         9a:be:c0:c6:ae:29:a4:b9:da:c7:ad:10:4d:32:af:46:c0:f7:
         11:8e:15:91:8c:be:8e:12:b6:b9:79:ef:1d:11:03:21:b9:7d:
         b3:2e:82:ed:bb:a2:4b:6f:6e:df:bd:f0:54:7f:56:8e:8e:bc:
         f9:0b:73:00:52:90:7d:f7:77:be:18:dd:06:9d:1a:fc:9d:c1:
         6d:b7:59:87:5f:ed:4d:40:b3:58:8b:3e:e6:2f:43:2f:1f:14:
         2d:35:4d:cc:19:a5:59:1d:a7:19:9a:d7:7c:ae:0b:de:63:41:
         bd:98:c6:4d:10:5c:c6:4e:73:c5:05:f1:55:8f:48:34:b0:70:
         d1:69:2f:0d:e1:c7:db:6f:46:9c:4d:e4:9e:63:4b:45:9b:90:
         e6:7c:83:ce:53:d4:e5:9b:0b:70:f7:0c:ab:65:7f:71:78:e3:
         9e:70:eb:06:f8:04:9b:39:6e:3f:e3:b4:10:09:ff:1f:15:af:
         3f:f0:4d:9b:1c:96:6e:80:5e:61:f4:97:eb:43:36:38:f0:e6:
         96:bd:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 13 11:06:04 2024 by rpki-client on console-fra.rpki-client.org